1. Home
  2. CVE Database
  3. CVE-2019-6546
HIGH · 7.8

CVE-2019-6546

GE Communicator, all versions prior to 4.0.517, allows an attacker to place malicious files within the working directory of the program, which may allow an attacker to manipulate widgets and UI elemen...

Vulnerability Description

GE Communicator, all versions prior to 4.0.517, allows an attacker to place malicious files within the working directory of the program, which may allow an attacker to manipulate widgets and UI elements.

CVSS Score

7.8

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
GeGe Communicator< 4.0.517

Related Weaknesses (CWE)

CWE-427

References

FAQ

What is CVE-2019-6546?

CVE-2019-6546 is a vulnerability with a CVSS score of 7.8 (HIGH). GE Communicator, all versions prior to 4.0.517, allows an attacker to place malicious files within the working directory of the program, which may allow an attacker to manipulate widgets and UI elemen...

How severe is CVE-2019-6546?

CVE-2019-6546 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2019-6546?

Check the references section above for vendor advisories and patch information. Affected products include: Ge Ge Communicator.